Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/48c71b1c69985e577b6f6eb0a32068d74a6de98a.roa
File:                     48c71b1c69985e577b6f6eb0a32068d74a6de98a.roa (raw, json)
Hash identifier:          R6Cv3tXga9wSe1Kwi77rh6/Xabp0+D5oViEbR3XjzOk=
Subject key identifier:   04:1D:A5:46:1C:96:EB:23:DA:96:23:0E:C9:C8:A3:A2:D7:24:E4:29
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15B7BF
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/48c71b1c69985e577b6f6eb0a32068d74a6de98a.roa
Signing time:             Tue 24 Aug 2021 22:37:40 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6059::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1423295 (0x15b7bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=48c71b1c69985e577b6f6eb0a32068d74a6de98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:4a:dd:a4:66:3e:8b:d6:b7:22:16:e5:f5:
                    62:9b:e2:a9:b6:4f:16:fa:94:9a:c6:09:4b:b8:7b:
                    a4:95:8a:0b:fa:36:7f:b6:20:74:19:27:34:91:50:
                    2c:60:eb:db:1c:80:90:b3:1b:87:e9:b8:57:32:d5:
                    3c:e8:8c:39:c0:b1:b7:dc:1a:5e:ea:77:e1:5f:2c:
                    c9:e4:d5:10:c9:3d:92:86:9f:c0:8b:38:08:16:35:
                    fb:8a:cd:ea:48:bb:36:8c:3e:5e:1f:22:71:3b:17:
                    fc:c4:1b:e2:09:d9:d7:6a:19:01:e8:27:04:50:58:
                    ad:d2:9e:72:63:0f:81:d7:2b:bf:bd:20:41:ff:a5:
                    0a:da:6a:61:e3:47:86:a3:74:ab:89:8e:60:74:c0:
                    5c:89:7a:bc:de:e4:65:1e:49:4a:9b:fc:fc:9f:00:
                    56:ea:63:6e:54:d1:cb:c9:aa:db:87:77:39:33:83:
                    43:4d:50:69:a9:b7:9c:dc:b4:52:6e:03:71:2b:e2:
                    ca:88:a7:75:3e:43:9c:8f:98:94:7a:b3:39:22:7e:
                    37:70:47:9d:c9:c3:37:7b:1d:5d:91:a0:83:dc:10:
                    0e:bf:e0:ca:c1:08:52:3c:66:34:5e:f6:cf:81:bf:
                    bd:4e:40:8b:04:6a:4f:85:8d:e6:2a:37:2f:92:77:
                    c9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1D:A5:46:1C:96:EB:23:DA:96:23:0E:C9:C8:A3:A2:D7:24:E4:29
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/48c71b1c69985e577b6f6eb0a32068d74a6de98a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6059::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:a7:2f:28:05:75:e6:77:06:cc:a4:33:e3:b4:6e:bb:62:3c:
         90:50:5a:c9:e2:94:84:2f:93:cc:b6:9b:b6:80:7a:30:0b:f0:
         f7:f4:e6:91:9f:17:15:cc:f2:f9:7c:13:78:56:e1:18:52:dc:
         26:0d:08:fc:f5:5d:f7:02:49:8e:3c:b8:12:2b:04:2d:08:c5:
         19:19:c8:93:66:90:15:c1:b5:df:c3:c4:6b:b0:be:b0:90:4d:
         ac:ec:55:72:6e:06:c7:a0:57:11:87:4d:34:31:fe:02:81:da:
         04:bc:78:13:7f:80:13:75:20:47:3e:ef:e9:5f:08:d3:d7:64:
         82:41:02:82:cc:64:17:aa:dd:52:af:ee:21:b3:50:d5:71:fd:
         ff:d6:dd:17:28:7f:f5:20:d9:4f:d2:4a:5f:de:9f:46:dc:e6:
         34:4c:95:cc:48:d9:ce:c0:9b:a5:6d:ae:f3:f3:82:84:09:69:
         29:ae:5e:51:86:6a:80:37:44:7e:35:78:14:6f:cf:ea:da:49:
         b7:0c:41:1c:e8:c3:d4:a0:b0:92:83:17:af:83:76:21:30:43:
         f9:23:94:58:94:73:32:be:36:e7:16:d3:29:e6:ea:49:7d:2b:
         a8:83:ab:12:c0:73:10:7f:54:55:e9:7f:5d:e2:9a:5a:a5:a4:
         db:9b:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----